Unauthorized Access

jupyterhub-firstuseauthenticator is vulnerable to unauthorized access. When create users=True is set, An attacker is able to access the user files and create a parallel path...

PT-2021-23166

Name of the Vulnerable Software and Affected Versions jupyterhub-firstuseauthenticator versions prior to 1.0.0 Description The vulnerability in jupyterhub-firstuseauthenticator allows unauthorized access to any user's account if create users=True and the username is known or guessed. This issue...